Your lab
Sets the purposes, informs patients, answers their requests.
Your patients’ data never leaves the EU.
On AWS in Paris, an HDS-certified host.
Live in France since September 2026. US hosting and a HIPAA program are on our roadmap.
The AI reads. Your staff approves.
Claude by Anthropic, on Amazon Bedrock. No model is trained on your data.
AWS data policy Photo · 1 page
Ms. Claire ROUX#14 · DOB May 12, 1984 · 42 y
Reading…Read · 6 tests · 1 needs codingORDERING PROVIDER
Last nameMARTINorder
First nameHélèneorder
RPPS10003456789? 1 digit unclear
ORDER
Date28/09/2026order
STATFastingChronic (ALD)Home draw
ADDITIONAL INFORMATION
Weight (kg)—required for CREA
TESTS · 6 1 uncoded
- NFS, plaquettesNFS
- Bilan lipidiqueEAL
- TSHTSH
- Glycémie à jeunGLY
- Créatinine + DFGCREA
- Vit DNeeds coding
Your codes, never the model’s
Every line points to an entry in your own dictionary. If none fits, it’s marked “Needs coding.”
What’s written, nothing more
Sex isn’t inferred from a first name. An unreadable field stays blank.
Doubts get flagged
A half-legible provider ID, a daughter’s order handed over by her mother: the AI flags it, your staff decides.
A name on every order
Nothing reaches the LIS without “Send” or “Approve.” That person’s name stays in the audit trail.
Your coding rules, written as sentences.
Type “if CREA, ask for weight”; the AI drafts the rule and a person saves it. From then on, plain code applies it, not the AI: same input, same output.
HPRIM into your LIS. No inbound ports.
Attachments included
On approval, the order goes out over SFTP in HPRIM Santé 2.5, France’s lab-order format, with the scanned order, ID, cards, and consents.
A read-only connector
A Windows PC in the lab reads patients, providers, and phlebotomists from your LIS four times a day. It sends only the rows that changed.
One key, one right
The connector’s key can only import, and only from the lab’s IP address. The API returns no patient data.
Your LIS is the reference
When values differ, your LIS wins.
What your IT team does
- 1In your LIS: an HPRIM Santé 2.5 interface to our SFTP drop, one receiver code per site.
- 2Network: the lab’s fixed public IP address.
- 3A Windows PC with read-only access to your LIS, left signed in (locked is fine).
Where every record lives.
AWS has held HDS v2, France’s health-data hosting certification, since April 21, 2026, Paris and Ireland included. The certificate, on AWS
| Data | Where | Protection |
|---|---|---|
| Records, visits, accounts | Paris · 2 zones | Encrypted database, cut off from the internet |
| Orders, cards, consents | Paris | Private S3, encrypted, versioned |
| Screen replays | Paris | Admins only, deleted after 30 days |
| AI reading | AWS regions in the EU | Claude on Amazon Bedrock |
| Home-visit addresses | Frankfurt · EU | Amazon Location, address only: no name, no health data |
Backed up nightly, locked for 35 days.
Database restorable to any point in the last 35 days; deleted files recoverable for 90 days.
Nothing deleted before 35 days
Vault · Paris
Copy · Ireland
Database · any point in time
One account each. Rights by role.
AsyniaSign in
Sign in with this device
or
Emaile.carter@example-lab.com
Password••••••••••••
Sign in
PasskeyPasskeys first
Face ID, Touch ID, Windows Hello, or a hardware key. Bound to Asynia’s address, they don’t work on a fake site.
Email code
Without a passkey: a six-digit code, valid 10 minutes, single use.
Lockouts and sessions
Account locked 15 minutes after 5 failures. Sessions close after 4 idle hours, 14 hours at most.
The Asynia team
No direct database access: every technical session is logged.
Who sees what
| Front desk | Back office | Admin | |
|---|---|---|---|
| Front deskPatient check-in | |||
| Lab directorReview, coding, approval | |||
| AdminUsers, audit trail, settings |
- Front deskPatient check-inFront desk
- Lab directorReview, coding, approvalFront deskBack office
- AdminUsers, audit trail, settingsFront deskBack officeAdmin
Every request is walled off to your lab.
Every action has an author.
‹ Arrivals
Ms. Laura BennettSent
Approved by Dr. Rachel KimTimeline
- 8:41:02Visit created · “+ New visit” · Main St. siteEmily C. · Front desk
- 8:41:05Record linked · Account BENNETT LauraEmily C. · Front desk
- 8:41:19Lab order uploaded · 1 page · photoEmily C. · Front desk
- 8:41:36Order read · Provider, date, 6 linesServer
- 8:41:49Codes proposed · 6 lines · 1 uncodedServer
- 8:43:10Consent signed · Non-covered testEmily C. · Front desk
- 8:52:30Codes edited · +1 coded lineDr. Rachel Kim · Lab director
- 8:52:58Transmission · HPRIM dropped · 3 filesDr. Rachel Kim · Lab director
Transmission · HPRIM Santé 2.5
Dr. Rachel Kim · Lab director8:52:58
Sample excerpt
Attachments
- ORDFICLab order
- IDEFICID card
- CONFICSigned consent
Before and after
Every correction keeps the old value and the new one: identity, codes, attachments.
Screen replay
An admin can replay what the front-desk screen showed. Passwords masked; images, scans, and signatures aren’t recorded.
Sign-in log
Sign-ins, failures, devices added or removed, admin actions: all recorded.
Your lab decides. Asynia processes.
Asynia
Processes data on your instructions.
Amazon Web Services
Hosts in Paris, runs the AI and computes home-visit routes in the EU.
All our subprocessors- Legal basis: provision of health care (GDPR Art. 9(2)(h)).
- For your privacy officer: security questionnaire and data processing agreement (Art. 28), on request. Contact us